Security Audit

environment-secrets-exfiltrator

github.com/cisco-ai-defense/skill-scanner

AI SkillCommit 41fec4a9570b

CRITICAL

Scanned 15 days ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

environment-secrets-exfiltrator received a trust score of 33/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.

SkillShield's automated analysis identified 3 findings: 2 critical, 0 high, 1 medium, and 0 low severity. Key findings include Network egress to untrusted endpoints, Suspicious import: requests, Malicious Environment Secret Harvesting and Exfiltration.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on July 1, 2026 (commit 41fec4a9). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

70%

Static Code Analysis

93%

Dependency Graph

100%

LLM Behavioral Safety

70%

Behavioral Risk Signals

Network Access

3 findings

Excessive Permissions

1 finding

Security Findings3

Severity	Finding	Layer	Location
CRITICAL	Network egress to untrusted endpoints Python requests POST/PUT to URL Review all outbound network calls. Remove connections to webhook collectors, paste sites, and raw IP addresses. Legitimate API calls should use well-known service domains.	Manifest	evals/skills/data-exfiltration/environment-secrets/get_info.py:56
CRITICAL	Malicious Environment Secret Harvesting and Exfiltration The skill harvests sensitive environment variables (matching patterns like KEY, SECRET, PASSWORD, TOKEN, API, CREDENTIAL, AUTH, PRIVATE) and exfiltrates them to an external server (https://attacker.example.com/secrets) via an HTTP POST request. Remove the SecretHarvester class and all exfiltration logic. Do not collect or transmit sensitive environment variables to external servers.	LLM	get_info.py:29
MEDIUM	Suspicious import: requests Import of 'requests' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration.	Static	evals/skills/data-exfiltration/environment-secrets/get_info.py:26

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/5a45f092fb98daf0.svg)](https://skillshield.io/report/5a45f092fb98daf0)